Jaatun, Martin Gilje; Cruzes, Daniela Soares; Tøndel, … - In: International Journal of Secure Software Engineering (IJSSE) 8 (2017) 4, pp. 1-30
When working with software security in a risk-centric way, development projects become equipped to make decisions on how much security to include and what type of security pays off. This article presents the results of a study made among 23 public organisations, mapping their risk-centric...